Vulnerability · Published May 9, 2023 · Assigned by AMD

CVE-2021-46753

Critical 9.1

In plain English

A critical-severity security flaw in Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP from AMD. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 47% of all known vulnerabilities).

Severity (CVSS 3.1)9.1Critical
Exploit odds (30 days)0.6%top 53.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Failure to validate the length fields of the ASP (AMD Secure Processor) sensor fusion hub headers may allow an attacker with a malicious Uapp or ABL to map the ASP sensor fusion hub region and overwrite data structures leading to a potential loss of confidentiality and integrity.

Affected products (as reported)

References